SSH download problem and vunerability

[Stefan Farrelly]

Hi all,

can anyone else please confirm a problem downloading the new version of HP's secure shell from software.hp.com. When you get to the slection/ordering page it says;

product name: HP-UX Secure Shell
product #: T1471AA
version: A.03.10.003

But when you next move onto the download page with the ftp link it only points to version A.3.10.002 and if you download it is version .002, not .003.

I need the latest version because we received an advisory today about the SSH version HP are using (based on openssh 3.1p1) and need to upgrade asap to the latest version. Im hoping HP's version .003 uses a late enough version of openssh to fix the problem (3.1.5 or 3.2.2).

[U.SivaKumar_2]

Hi,

Have you installed that downloaded one and checked the version by running the executable

regards,
U.SivaKumar

[Steve Steel]

Hi


HP-UX Secure Shell A.03.10.002 is for HP-UX 11.00 and 11i
HP-UX Secure Shell A.03.10.003 is for HP-UX 11i version 1.6



Steve Steel

[Stefan Farrelly]

Steve,

the selection page does let me select 3.10.003 for HP-UX 11.0 and when it gots to the download page 3.10.002 is listed - so even if .003 is for 11i it still lets me select for 11.0 without an error - so there is still a problem on the HP site.

[Wodisch]

Hi,

since HP's SSH is their compilation the OpenSSH anyway, how about using the original OpenSSH - it is version 3.5p1 already...
And they *support* HP-UX with their "portable" flavour of it.

FWIW,
Wodisch